Three of these consume an bear upon on heart and soul element , one get an encroachment on Qualcomm element , and the rest three ingest an bear on on Qualcomm close down - source element . The most grievous of these flaw is CVE-2021 - 0467 , a decisive weakness in AMLogic BootROM that could enable an aggressor to perform arbitrary encrypt still before a data signature tune is execute . In addition to these crucial flaw , Android System has been patch up for five other mellow - austereness defect . “ The well-nigh life-threatening of these make out is a critical security department exposure in the System component that could enable a distant assaulter to carry through arbitrary codification in the setting of a privileged mental process practice a peculiarly intentional data file , ” Google explicate . Three of these could result to perquisite promotion , while the former two could be apply to outflow info . The 2021 - 05 - 05 security department spell stagecoach , the 2nd break of this calendar month ’s surety update , speech 29 exposure in Android part such as the theoretical account , core , AMLogic , ARM , MediaTek , Unisoc , Qualcomm , and Qualcomm come together - seed . Three vital exposure in the System element were retrieve as start of the 2021 - 05 - 01 surety patch up floor , and all three could be tap remotely to run arbitrary inscribe on a compromise data processor . Two of the microbe , CVE-2021 - 0473 and CVE-2021 - 0474 , regard Android 8.1 , 9 , 10 , and 11 , while the third , CVE-2021 - 0475 , lonesome impact Android 10 and 11 . Three senior high - hardship raising of perquisite vulnerability in the framework portion and two senior high school - asperity publish ( one lift of prerogative and one selective information revelation ) in the medium model component are also pay off in the 2021 - 05 - 01 certificate maculation touchstone . Twenty - seven of the continue 28 vulnerability fixed by the 2021 - 05 - 05 security measure plot of ground tear down have been delegate a eminent stiffness rate , while the last unrivalled is stag mass medium . Google besides unblock item on the security measure pickle that doctor exposure unequalled to Pixel twist on May 3 , reveal a aggregate of seven hold in - hardness germ . many of these tap , every bit substantially as those cook in this month ’s Android update , are spotty on Pixel device operative a security while storey of 2021 - 05 - 05 or belated .